[oss-security] 20190731 Multiple vulnerabilities in Jenkins pluginsmailing list
http://www.openwall.com/lists/oss-security/2019/07/31/1 CVE-2019-10364
MEDIUM
Jenkins Amazon EC2 Plugin leaked beginning of private key in system log
Record summary
CVE-2019-10364 has a selected CVSS score of 5.5 (medium).
Description
Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Jenkins Amazon EC2 PluginBrowse Jenkins project / Jenkins Amazon EC2 Plugin | CVE List | 1.43 and earlier | affected |
org.jenkins-ci.plugins:ec2Browse Maven / org.jenkins-ci.plugins:ec2 | GitHub Advisory | Before 1.44 · Fixed in 1.44 | affected |
References
4github.com
https://github.com/jenkinsci/ec2-plugin/commit/78c3c49a227ac8eccb8b1be7193d5605363fe251 jenkins.ioConfirmation
https://jenkins.io/security/advisory/2019-07-31 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-10364